Advanced level

The normal distribution and the three-sigma rule

The bell curve describes heights, measurement errors, exam scores and packet weights — and that is no coincidence but the content of the central limit theorem. Two numbers, μ and σ, say everything there is to say about such a distribution, and the 68–95–99.7 rule lets you read it without tables.

Before you start

This topic builds on earlier ideas. Before you start, it's worth working through the lessons below — they'll make everything click:

Where this is used

Real situations where you count exactly the way this lesson teaches:

  • Manufacturing tolerance
    A filling machine puts an average of 500 g into a packet with a standard deviation of 2 g. The three-sigma rule says 99.7 per cent of packets fall between 494 and 506 g. If the standard allows a 5 g deviation, that is 2.5 sigmas, then 1.24 per cent of production falls outside tolerance — at 20,000 packets a day that is 248 units to reject, and that is the number a decision to recalibrate rests on.
  • An exam score against the group
    Test results have a mean of 100 points and a standard deviation of 15. A score of 130 gives z = (130 − 100)/15 = 2, two deviations above the mean. Beyond two sigmas lie 5 per cent of results, half on each side, so only 2.3 per cent of candidates score above 130 — one person in forty-four.
  • A process control chart
    Statistical process control puts its alarm limits at μ ± 3σ precisely because only 0.3 per cent of a healthy process falls outside them. At one measurement an hour that gives about 3 false alarms per 1000 measurements, roughly one every six weeks of continuous running. Narrowing the limits to two sigmas would raise that to 50 per 1000, which is one alarm a day.
  • When to leave the house
    A commute takes 28 minutes on average with a standard deviation of 5 minutes. To be late no more than once in forty days you need a margin of two sigmas, that is 28 + 10 = 38 minutes. One sigma, meaning 33 minutes, would be enough on only 84 per cent of days — which is being late every sixth day.

All formulas

  • The normal density

    f(x)=1σ2πe(xμ)22σ2f(x) = \frac{1}{\sigma\sqrt{2\pi}}\, e^{-\frac{(x-\mu)^2}{2\sigma^2}}

    the area under the whole curve is 1

  • Notation

    XN(μ,σ)X \sim N(\mu, \sigma)

    μ shifts the curve, σ widens it

  • Standardisation

    z=xμσz = \frac{x - \mu}{\sigma}

    how many deviations x lies from the mean

  • The standard distribution

    ZN(0,1)Z \sim N(0, 1)

    one distribution instead of an infinite family

  • The one-sigma rule

    P(Xμ<σ)0.68P(|X - \mu| < \sigma) \approx 0.68

    two thirds of the population

  • The three-sigma rule

    P(Xμ<2σ)0.95,P(Xμ<3σ)0.997P(|X - \mu| < 2\sigma) \approx 0.95, \qquad P(|X - \mu| < 3\sigma) \approx 0.997

    beyond three sigmas lie 3 cases in 1000

  • Central limit theorem

    Xˉμσ/nnN(0,1)\frac{\bar{X} - \mu}{\sigma / \sqrt{n}} \xrightarrow[n \to \infty]{} N(0, 1)

    a sample mean tends to a normal distribution

  • Normal approximation

    B(n,p)N(np, np(1p))B(n, p) \approx N\big(np,\ \sqrt{np(1-p)}\big)

    usable once np(1 − p) ≥ 10

The previous lesson ended on the continuous variable and a note about densities. There is one density more important than all the others put together — and the reason it is important comes halfway through this lesson.

The Gaussian curve

A random variable has a normal distribution with parameters μ\mu and σ\sigma when its density is

f(x)=1σ2πe(xμ)22σ2f(x) = \frac{1}{\sigma\sqrt{2\pi}}\, e^{-\frac{(x-\mu)^2}{2\sigma^2}}

We write this as XN(μ,σ)X \sim N(\mu, \sigma). The formula need not be memorised — what matters is understanding what its two numbers do.

−6−4−2024600.10.20.30.4xdensityσ = 1σ = 2
The same mean, two standard deviations. The σ = 2 curve is twice as wide and exactly twice as low — because the area under each of them must be one.
  • μ\mu slides the curve. It is simultaneously the mean, the median and the mode, because the bell is symmetric.
  • σ\sigma widens the curve. It is the distance from the peak to the inflection point — where the slope stops steepening and starts flattening.

The area under the whole curve is always 11, so a wider curve has to be lower. The probability of an interval is the area under the curve above it, that is a definite integral:

P(aXb)=abf(x)dxP(a \leq X \leq b) = \int_a^b f(x)\,dx

That integral has no elementary form — and that is the only reason a normal distribution is read off tables, or off the rule below, instead of being computed.

Standardisation

There are infinitely many normal distributions, one for every pair (μ,σ)(\mu, \sigma). They need not all be tabulated, because the substitution

z=xμσz = \frac{x - \mu}{\sigma}

reduces every one of them to a single case. The variable ZZ then has the standard distribution N(0,1)N(0, 1): mean zero, deviation one. The number zz itself carries a very useful meaning: it says how many standard deviations the observation lies from the mean.

Exam results have a mean of 100 and a standard deviation of 15. A student scores 130. How does that compare with the group?

The three-sigma rule

Three numbers are worth knowing by heart, because they replace tables in most situations:

−4−3−2−10123400.10.20.30.4zdensity
The shaded part is the interval from −σ to +σ. It covers about 68 per cent of the whole area under the curve — and so 68 per cent of the population.
intervalshareoutside it
μ±σ\mu \pm \sigma68%68\%11 case in 33
μ±2σ\mu \pm 2\sigma95%95\%11 in 2020
μ±3σ\mu \pm 3\sigma99.7%99.7\%33 in 10001000
A machine fills packets with an average of 500 g and a standard deviation of 2 g. What interval holds 99.7% of the packets?

The rule also works read backwards, and that is how practice most often asks about it: since 9595 per cent of results lie in μ±2σ\mu \pm 2\sigma, the interval holding 9595 per cent of packets reaches ±4\pm 4 grams from the mean.

Where the curve comes from

Why do so many different quantities share exactly this shape? Two limit theorems answer that.

The law of large numbers says where a sample mean is heading: as the number of observations grows, it approaches the expected value. It is what justifies the frequency of the classical-probability lesson approximating a probability at all.

The central limit theorem says how it gets there:

Xˉμσ/nnN(0,1)\frac{\bar{X} - \mu}{\sigma / \sqrt{n}} \xrightarrow[n \to \infty]{} N(0, 1)

The sum or the mean of many independent quantities with finite variance is approximately normal — whatever distribution each of them has on its own. That is the real answer to “why is everything normal”: a person’s height, a measurement error or a commute time is the resultant of hundreds of small independent causes, and a resultant of such terms is normal almost always.

The denominator σ/n\sigma/\sqrt{n} is worth noticing: the spread of the mean shrinks like the square root of the number of observations. To halve the error you must gather four times as much data.

When the bell curve does not hold

The theorem has hypotheses and they do get broken. Three situations are worth recognising:

  • Fat-tailed distributions. Wealth, city sizes, daily stock returns, article view counts — there a single observation can exceed the mean a hundredfold. Under a normal distribution that would be practically impossible: a 6σ6\sigma deviation has a probability of about one in a billion, and on the stock market such days come along every few years.
  • Dependent terms. The theorem requires independence. When observations influence one another — a panic sell-off, an epidemic — their sums have no reason to be normal.
  • One dominant term. If the resultant is really one cause plus noise, the shape comes from that cause and not from a limit theorem.

The practical conclusion is that normality has to be argued for, not assumed by default. A normal model applied to a fat-tailed distribution systematically understates the risk of extreme events — and that is the costliest error in this whole branch.

Approximating the binomial

The central limit theorem also acts on the distribution of the previous lesson. The number of successes is a sum of nn independent trials, so for large nn

B(n,p)N(np, np(1p))B(n, p) \approx N\big(np,\ \sqrt{np(1-p)}\big)
152025303500.050.10.15kP(X = k)50 coin tossesnormal curve
Fifty coin tosses and a normal curve with the same mean and the same deviation. The tops of the bars sit on the curve — which means a sum of fifty trials can be handled with one formula instead of fifty-one.

The practical criterion is np(1p)10np(1-p) \geq 10. For n=50n = 50 and p=12p = \tfrac{1}{2} that comes to 12.512.5, so the approximation is allowed — and the drawing shows it. When pp is very small, however, the product stays small even for enormous nn, and there the right approximation is the Poisson distribution rather than the normal one.

A coin is tossed 50 times. Estimate the probability that heads comes up between 18 and 32 times.

Exercises

The set drills three skills. The zz prompt gives xx, μ\mu and σ\sigma and asks for the standardisation, that is for the number of standard deviations between the observation and the mean. The prompt with an interval ending in an arrow and a per cent sign gives μ\mu, σ\sigma and the two ends and asks what percentage of the population lies there — you read it off the 68–95–99.7 rule by adding bands.

The third prompt reads the same rule backwards: it gives the percentage and σ\sigma and asks for aa, the reach of the interval μ±a\mu \pm a. That is the version practice asks about — “what range holds 95 per cent of the results” — and that is why it stands here on its own.

In all three cases the answer is a number, not a fraction.

Practice

Work through a set of exercises — they get harder as you go. At the end you'll see your score and the mistakes worth reviewing.

Exercise 1 of 8Score: 0
z: x = 44, μ = 50, σ = 10

The generator does not ask you to judge whether a normal model may be assumed — that is a verdict, not a number. The three situations where the answer is “no” are listed in the section on fat tails.

Common mistakes

  • Assuming normality without argument — fat-tailed distributions look perfectly ordinary in a small sample, and a normal model then understates the risk of extremes by orders of magnitude.
  • Reading σ\sigma as the width of the whole distribution — sigma is the distance to the inflection point; the real reach of the data is closer to 6σ6\sigma.
  • Dividing by the variance instead of the deviation — standardisation has σ\sigma in the denominator, not σ2\sigma^2; the slip changes the answer by a factor of σ\sigma.
  • Applying the three-sigma rule to an asymmetric interval without splitting it into bands — the interval from σ-\sigma to 2σ2\sigma is 34%+34%+13.5%34\% + 34\% + 13.5\%, that is 81.5%81.5\%, not the average of 68 and 95.
  • Approximating a binomial by a normal at small np(1p)np(1-p) — for rare events the right model is the Poisson distribution; the normal curve there even produces negative estimates.
  • Confusing the law of large numbers with a “law of averages” — the mean approaches μ\mu because later results dilute the deviations, not because nature evens them out. The coin still does not remember previous tosses.

Formula card

Topic: The normal distribution

  • The normal density

    f(x)=1σ2πe(xμ)22σ2f(x) = \frac{1}{\sigma\sqrt{2\pi}}\, e^{-\frac{(x-\mu)^2}{2\sigma^2}}

    the area under the whole curve is 1

  • Notation

    XN(μ,σ)X \sim N(\mu, \sigma)

    μ shifts the curve, σ widens it

  • Standardisation

    z=xμσz = \frac{x - \mu}{\sigma}

    how many deviations x lies from the mean

  • The standard distribution

    ZN(0,1)Z \sim N(0, 1)

    one distribution instead of an infinite family

  • The one-sigma rule

    P(Xμ<σ)0.68P(|X - \mu| < \sigma) \approx 0.68

    two thirds of the population

  • The three-sigma rule

    P(Xμ<2σ)0.95,P(Xμ<3σ)0.997P(|X - \mu| < 2\sigma) \approx 0.95, \qquad P(|X - \mu| < 3\sigma) \approx 0.997

    beyond three sigmas lie 3 cases in 1000

  • Central limit theorem

    Xˉμσ/nnN(0,1)\frac{\bar{X} - \mu}{\sigma / \sqrt{n}} \xrightarrow[n \to \infty]{} N(0, 1)

    a sample mean tends to a normal distribution

  • Normal approximation

    B(n,p)N(np, np(1p))B(n, p) \approx N\big(np,\ \sqrt{np(1-p)}\big)

    usable once np(1 − p) ≥ 10

−6−4−2024600.10.20.30.4xdensityσ = 1σ = 2
Two normal curves with the same mean and different standard deviations. The narrow one has σ = 1, the wide one σ = 2 — both enclose an area of one, so the wider must be lower.
−4−3−2−10123400.10.20.30.4zdensity
The shaded interval from μ − σ to μ + σ covers about 68 per cent of the area under the curve. Two sigmas give 95 per cent, three give 99.7 per cent; beyond them lie three cases in a thousand.

Frequently asked questions

Related articles